snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE have been designed to misuse the info->owner field in a safe way

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Linux kernel bug in snd_ctl_elem_add uses info->owner for count, affecting private size multiplied by count; dispute exists.

Reporter	Title	Published	Views	Family All 150
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
CBLMariner	CVE-2020-11725 affecting package kernel 5.4.91-6	6 Apr 202123:51	–	cbl_mariner
CNVD	Unspecified vulnerability in Linux kernel (CNVD-2020-24139)	13 Apr 202000:00	–	cnvd
CVE	CVE-2020-11725	12 Apr 202021:25	–	cve
Cvelist	CVE-2020-11725	12 Apr 202021:25	–	cvelist
Debian CVE	CVE-2020-11725	12 Apr 202021:25	–	debiancve
F5 Networks	K01002228: Linux kernel vulnerability CVE-2020-11725	21 Feb 202318:35	–	f5
NVD	CVE-2020-11725	12 Apr 202022:15	–	nvd
OSV	BELL-CVE-2020-11725 CVE-2020-11725 does not affect BellSoft software	12 Apr 202022:15	–	osv
OSV	DEBIAN-CVE-2020-11725	12 Apr 202022:15	–	osv